REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Sbdot.fv Trojan]
"FilterBuffer"=hex:3b,00,00,00,02,00,00,00,17,00,00,00,1f,00,1e,00,00,10,02,06,\
  00,6e,23,00,00,00,00,00,00,00,00,1c,00,00,00,00,00,35,00,50,77,00,00,d3,16,\
  f7,1d,00,00,00,00,00,00,00,00,00,00,00,00
"szDescr"="The sending machine may be infected with the Sdbot.fv Trojan"
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]